2024-01-01_afdb2a37d15de72f2c479ab9e6156f42_cobalt-strike_lockbit | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-01_afdb2a37d15de72f2c479ab9e6156f42_cobalt-strike_lockbit
Size

332KB
MD5

afdb2a37d15de72f2c479ab9e6156f42
SHA1

94da14c3998d2a3b79061e9189cec1461c1c4eac
SHA256

df890183b8b69e815eec22f6ed091e8ed301ce3dcf145d1515ca0c6cbc56a620
SHA512

4944b8632dbca6d1c9b6da9503bebcbad50f7654e91b1b76d21a4861654bfaec916a8544698c500234cc6c67b71b5776308b409acb26eec0efefec9c6495afc6
SSDEEP

3072:SynCulRzvhAhQEXfBKfoXT2bdR1g2br54Qun9UItLpCEcbqGpYl7WUCJMABezlAH:SynLRzvSQEvBKuaxgI6QkUIcbpO5zx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-01_afdb2a37d15de72f2c479ab9e6156f42_cobalt-strike_lockbit

Files

2024-01-01_afdb2a37d15de72f2c479ab9e6156f42_cobalt-strike_lockbit
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 169KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.crack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE